Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          gyPYJBuu4hbbFLXzl1t1VP6mb4hkRvRGVPlHF+LxYGY=
Subject key identifier:   AB:B2:46:B1:A3:2D:48:CA:0E:3F:A2:84:4E:A1:E4:FC:4B:B0:FD:E2
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       5D5370055A74A1BDF45571AAB8C8B00F9040D7F6
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        2804:fec:c748::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:53:70:05:5a:74:a1:bd:f4:55:71:aa:b8:c8:b0:0f:90:40:d7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=ABB246B1A32D48CA0E3FA2844EA1E4FC4BB0FDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:8a:fc:da:70:09:a5:69:9b:d8:1a:ce:12:
                    69:44:a5:a0:b0:e3:a5:86:0a:5c:29:82:42:15:f2:
                    dc:27:ae:9b:3b:ed:9d:14:61:d4:04:16:13:0d:a1:
                    6a:a0:d3:7d:92:6b:6f:9c:e8:d9:3a:44:c1:1e:60:
                    9f:70:44:6c:a9:cc:6c:20:70:f0:4a:77:a0:55:2f:
                    74:82:3c:6c:cc:4c:0f:b6:92:67:6f:77:53:06:10:
                    be:7f:12:5e:5a:eb:b0:f8:c5:33:d4:69:16:5b:e4:
                    39:79:1f:be:7c:4c:6d:3a:42:00:63:52:63:eb:cc:
                    2d:66:40:86:3f:cb:68:01:3a:0c:74:47:4c:97:3f:
                    11:f2:aa:fe:df:2d:29:34:ff:1d:15:d8:ad:2b:01:
                    a0:fc:3a:6a:cc:c3:fe:78:a5:17:e8:46:eb:cc:8b:
                    88:22:9e:80:09:14:b6:ca:c4:89:f2:9e:86:39:d6:
                    99:72:ec:75:ac:71:12:bf:31:d4:a5:15:fe:68:9a:
                    7f:f3:eb:28:fa:ec:d4:99:a6:20:17:43:5f:09:04:
                    e8:43:88:26:19:1e:cb:e4:ef:ec:ae:67:2a:26:24:
                    c1:46:6b:9d:d6:19:46:4d:9e:dc:e3:48:d4:20:bc:
                    8b:9a:12:1e:4e:b7:d4:cc:be:32:ba:07:8b:44:aa:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B2:46:B1:A3:2D:48:CA:0E:3F:A2:84:4E:A1:E4:FC:4B:B0:FD:E2
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c748::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:57:3d:48:a0:f2:c4:3c:bc:8c:7b:15:22:7c:29:5c:9b:eb:
         a7:0e:b2:d2:4e:98:66:44:bb:0d:2f:95:72:a9:7a:9f:b2:d5:
         7f:4b:22:9a:2f:32:08:d3:dc:bb:29:62:4f:96:25:2a:4d:4b:
         90:fe:72:65:11:c4:fb:3d:09:d7:0c:73:85:fa:a4:55:ef:04:
         24:e7:2b:6b:68:7f:72:e7:84:3b:34:cc:b9:c6:04:35:0a:89:
         b8:75:c8:5e:f9:23:e2:c5:ad:ce:2b:1d:91:5a:a9:65:0d:21:
         0a:cc:d5:b6:94:f1:8a:db:ae:69:75:a6:e5:50:bc:b1:4d:62:
         e3:08:7a:18:e4:51:86:2a:5a:2b:60:b2:c0:a0:c7:01:46:c7:
         8c:95:e2:67:54:af:29:29:8c:f7:cc:07:f0:48:1b:39:8a:28:
         93:f0:a6:29:78:8c:6d:a7:ed:c2:56:95:71:7e:6f:1a:e6:20:
         ae:d4:34:40:05:b9:de:19:09:00:d9:16:a8:e5:7b:d9:ce:32:
         6b:a3:bf:c2:cd:b2:73:2f:82:8a:5f:4b:45:df:65:a4:ef:1f:
         d9:88:86:00:a5:61:dd:7e:05:92:62:2a:6f:9c:f3:f8:33:00:
         26:ef:8b:52:2f:51:ad:b9:43:a2:d8:6f:76:b7:b6:2a:9c:56:
         51:49:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org